2.0-Enum Hints and Misc

Username collection

Custom Password list

Usernames

HINT

Create a files containing username variations

Manual

suppose the user "jack" was found, use variations to try and auth to applications

name2user.py

user_verbose.txt

cat pwd.txt | rsmangler --captical --file - > mangled.txt

jack
Jack
jack@domain.com
Jack@domain.com

test a set of "default"(ish) passowrds against all services

Create a files containing username related passwords

user2pass.py

As-Rep Roasting 9.0-ad enum and exploit

Password Spraying 3.0-password attacks

BruteForce and Auth 3.0-password attacks

Client-Side Attacks 3.1-common exploits

jack
Jack
admin
Admin
password
Password

default_pass_list.txt

Tip
If, during your enumeration phase you come across any names or usernames, be sure to list them down.

You can use name2user.py to create a variation of usernames based on the name provided, and you can use user2pass.py to generate a set of passwords related to the username

Where appropriate perform password attacks against all available computers/servers and services

TIP
If you have usernames, try mutations of the username against services and or try some of the following attack types

example